From d7c88780e1df54f34563d60bd7fa01011d2eef03 Mon Sep 17 00:00:00 2001
From: chenluhua1980 <Chenluhua@qq.com>
Date: 星期一, 26 一月 2026 23:17:17 +0800
Subject: [PATCH] 1.CSVData.cpp 里 unserialize 用了 8*2、125*2,但 serialize 只写 8 + 125 字节。 m_svRawData.insert 的 end 指针是 pszBuffer + 125*2,没有用 index 计算,可能把无效区域一起拷进去。 一旦 size 实际是 133(不是 266),就会直接越界,堆会被破坏,m_svDatas.clear() 在销毁元素时崩。

---
 SourceCode/Bond/Servo/EqsGraphWnd.cpp |    9 +--------
 1 files changed, 1 insertions(+), 8 deletions(-)

diff --git a/SourceCode/Bond/Servo/EqsGraphWnd.cpp b/SourceCode/Bond/Servo/EqsGraphWnd.cpp
index cca80eb..9e68a4c 100644
--- a/SourceCode/Bond/Servo/EqsGraphWnd.cpp
+++ b/SourceCode/Bond/Servo/EqsGraphWnd.cpp
@@ -495,14 +495,7 @@
 
 void CEqsGraphWnd::SetOnListener(EqsGraphListener& listener)
 {
-	m_listener.onConnectPin = listener.onConnectPin;
-	m_listener.onCheckConnectPin = listener.onCheckConnectPin;
-	m_listener.onDisconnectPin = listener.onDisconnectPin;
-	m_listener.onDeleteEqItem = listener.onDeleteEqItem;
-	m_listener.onEqItemPosChanged = listener.onEqItemPosChanged;
-	m_listener.onDblckEqItem = listener.onDblckEqItem;
-	m_listener.onRclickEqItem = listener.onRclickEqItem;
-	m_listener.onSelectEqItem = listener.onSelectEqItem;
+	m_listener = listener;
 }
 
 BOOL CEqsGraphWnd::SetCurSel(int nSel)

--
Gitblit v1.9.3